Skip to content

v1.5.0

Choose a tag to compare

View all tags
@me-bender me-bender released this 17 Jun 20:35
· 77 commits to main since this release
v1.5.0
1b29850

Improvements

  • trivy collector — new rescan cron sub-collector: re-runs the dependency (SCA) scan daily on each component's default branch and overwrites .sca, so the sca policy re-evaluates a previously-clean commit against CVEs published after it was first scanned. Reuses the existing auto scan (same auto.sh, same image); stamps .sca.source.integration as cron (vs code for the on-push scan). Enabled by default; opt out with exclude: [rescan]. (#205)
  • grype collector — the same scheduled default-branch re-scan and .sca overwrite as trivy, symmetric behavior. (#204)

Consumers pin this release with @v1.5.0 in lunar-config.yml. Full changelog: https://github.com/earthly/lunar-lib/blob/v1.5.0/CHANGELOG.md

Assets 2
Loading